PTA Solutions for Security Consultants and Service Providers
PTA technology is comprised of a unique
data model and a set of well defined calculative methods.
PTA enables you to assess risk levels and provides quantitative prioritized countermeasures.
The software infrastructure was designed in a modular way that easily enables customizing
it's various elements. PTA technology can be integrated with other security products
and services to provide superior security management solutions.
Cooperation with Partners
PTA Technologies is actively pursuing cooperation
with security consultants firms and security services providers as follows:
1. PTA Qualified Partner Program for security consulting and
security services firms.
The free program enables
security consulting companies to use PTA Professional
Edition platform in their risk analysis missions and add value to their service proposition.
Contact
Marina for more details on
how to join the PTA
Qualified Partner Program.
2. OEM, Tailored Systems, Custom Security Libraries and
Custom Reports - for
those companies seeking to offer threat analysis systems tailored to their
clients’ needs, we offer personalized, private professional development
programs. Each system can be custom designed for your technology and/or
professional services’ needs. For more information please contact
Zeev Solomonik.
3. Professional Development Services for customizing PTA
technology according to large scale enterprise needs. PTA Technologies is a division of
Eldan Software
Systems Ltd. Our team has wide experience in software design and development
and in accompanying our customers in creating unmatched systems with outstanding quality.
For more information on our professional development services, please
contact
Gabi Laebel.
Integrating PTA Technology with Security Solutions
The PTA software technology infrastructure is comprised
of the following modules:
- Quantitative threat model database. The scheme of the database can
be easily customized to include additional entity types. For example audit
and monitoring steps,
topology layouts, operative parameters etc. There is no limit to the number
of entities and interrelations between them in the model.
- Data input interfaces. Enables automatic input of entities data and
parameters from a variety of external sources e.g. vulnerability scanners, real-time
security analyzers, network appliances etc.
- PTA calculative engine. The calculative methods can be easily adapted
to a variety of application domains. For example the financial values of assets
can be expressed according to localized formulas, the severity of threats can
have mnemonic descriptions etc.
- Entity libraries. The technology plug-in data repositories enable
preparation of security entities check lists that comply with information security
standards such as ISO 17799, BS 7799, ISO 27001 and PCI DSS. Security equipment manufacturers and
security services and solutions providers can build relevant subsets of vulnerabilities,
threats, countermeasures and assets that best suit their security management
conventions.
- User interface layer. Can be customized and adapted to specific needs.
- Reporting subsystem. Provides maximal flexibility in customizing
reports and allows almost any type of cross-section tabular queries, analysis,
display views and graphs.
- Lightweight installation. Facilitate distribution, deployment and
repackaging with existing products.
***
Practical
Threat Analysis Real Life Case Studies
Home Page